Analysis
- max time kernel
598s - max time network
474s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
14/10/2026, 15:27
General
- Target Intelligent standby list cleaner ISLC.exe
- Size 1.1MB
- Sample261014-svsapsgg52
- SHA256 11e4ed0b322adced3214c5a73ca1e807140341be6327b2a47a4c52434e73322f
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Intelligent standby list cleaner ISLC.exe"C:\Users\Admin\AppData\Local\Temp\Intelligent standby list cleaner ISLC.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3540-0-0x00000212B2060000-0x00000212B2184000-memory.dmp
memory/3540-1-0x00000212B2520000-0x00000212B2530000-memory.dmp
memory/3540-2-0x00000212B3F90000-0x00000212B4042000-memory.dmp
memory/3540-14-0x00000212CDD00000-0x00000212CDD08000-memory.dmp
memory/3540-15-0x00000212B25C0000-0x00000212B25D0000-memory.dmp
memory/3540-16-0x00000212B25C0000-0x00000212B25D0000-memory.dmp
memory/3540-17-0x00000212B25C0000-0x00000212B25D0000-memory.dmp
memory/3540-18-0x00000212CED00000-0x00000212CED38000-memory.dmp
memory/3540-19-0x00000212CE040000-0x00000212CE04E000-memory.dmp
memory/3540-20-0x00000212CEC40000-0x00000212CEC62000-memory.dmp
memory/3540-21-0x00000212B25C0000-0x00000212B25D0000-memory.dmp
memory/3540-25-0x00000212B25C0000-0x00000212B25D0000-memory.dmp
memory/3540-27-0x00000212B25C0000-0x00000212B25D0000-memory.dmp
memory/3540-26-0x00000212CDB20000-0x00000212CDCEE000-memory.dmp
memory/3540-28-0x00000212B25C0000-0x00000212B25D0000-memory.dmp
memory/3540-29-0x00000212B25C0000-0x00000212B25D0000-memory.dmp
memory/3540-59-0x00000212CDB20000-0x00000212CDCEE000-memory.dmp